60ph Casino – Privacy Policy

1 Introduction

This Privacy Policy ("Policy") describes how 60ph ("60ph," "we," "us," or "the Company"), operator of the online gaming platform accessible at https://60ph.cam (the "Platform"), collects, uses, discloses, stores, and protects personal information relating to registered players and visitors ("you" or "Data Subject") in accordance with the Data Privacy Act of 2012 (Republic Act No. 10173, "DPA"), its Implementing Rules and Regulations, the directives of the Philippine National Privacy Commission ("NPC"), and the applicable regulations of the Philippine Amusement and Gaming Corporation ("PAGCOR").

60ph is committed to handling all personal data with the principles of transparency, legitimate purpose, and proportionality that the DPA demands. This Policy applies to all personal data processed in connection with your use of the 60ph Platform, regardless of how you access it — via desktop browser, mobile browser, or any other means.

2 Who We Are – Data Controller

For the purposes of the Data Privacy Act of 2012 and its Implementing Rules and Regulations, 60ph is the Personal Information Controller ("PIC") in respect of the personal data it collects and processes through the Platform. As PIC, 60ph determines the purposes and means of processing your personal data and is legally responsible for ensuring that processing is carried out lawfully, fairly, and transparently.

60ph operates under a valid license issued by PAGCOR and is subject to PAGCOR's data protection and anti-money laundering requirements in addition to those imposed by the DPA. Where PAGCOR requirements impose stricter obligations on 60ph than the DPA alone would require, 60ph complies with the stricter standard.

60ph has appointed a Data Protection Officer ("DPO") responsible for overseeing compliance with this Policy and applicable data protection law. The DPO's contact details are provided in Section 15 of this Policy.

3 Personal Data We Collect

60ph collects the following categories of personal data in connection with the operation of the Platform and your account:

60ph does not collect special categories of sensitive personal information (such as health data, biometric data, or political opinions) except where strictly required by PAGCOR responsible gaming obligations — for example, recording a player's self-exclusion status or problem gambling risk assessment — and only with the player's explicit consent or where processing is required by law.

4 How We Collect Personal Data

60ph collects personal data through the following means:

4.1 Direct Collection

Data you provide directly to 60ph when registering an account, completing KYC verification, making a deposit or withdrawal, contacting customer support, participating in a promotion, or updating your account settings.

4.2 Automated Collection

Technical data collected automatically through your use of the Platform — including device identifiers, IP addresses, session activity logs, and game interaction data — using cookies, local storage, server logs, and similar technologies. See Section 8 for full details on cookies.

4.3 Third-Party Sources

Identity and fraud-screening information obtained from third-party KYC verification providers and credit reference agencies; transaction confirmation data from payment processors including GCash, Maya, and Philippine banking partners; and, where applicable, sanctions and politically exposed persons (PEP) screening data from compliance databases as required under the Anti-Money Laundering Act.

5 Legal Basis for Processing

Under the Data Privacy Act of 2012, 60ph processes your personal data only where a valid legal basis exists. The applicable legal bases and the processing activities they support are:

• Performance of a Contract: Processing necessary to register and maintain your account, deliver gaming services, process deposits and withdrawals, and operate the Platform as described in the 60ph Terms and Conditions;
• Legal Obligation: Processing required to comply with PAGCOR's licensing requirements, the Anti-Money Laundering Act of 2001 (RA 9160 as amended), the Data Privacy Act of 2012, and any other applicable Philippine law or regulatory directive;
• Legitimate Interests: Processing for fraud prevention, platform security, detection of cheating or policy violations, IT infrastructure management, and internal analytics for service improvement — where these interests are not overridden by your fundamental rights;
• Consent: Processing for direct marketing communications, optional personalisation features, and any other processing where consent has been requested and granted. Consent is freely given, specific, informed, and may be withdrawn at any time without detriment to your Account.

6 How We Use Your Personal Data

60ph uses collected personal data for the following purposes:

• To create, verify, maintain, and close your 60ph Account;
• To process deposits and withdrawals through GCash, Maya, and other approved Philippine payment channels;
• To deliver all gaming, betting, and entertainment services available on the 60ph Platform;
• To verify your identity and age in compliance with PAGCOR and DPA requirements;
• To comply with anti-money laundering obligations under RA 9160, including transaction monitoring and suspicious activity reporting to the Anti-Money Laundering Council (AMLC);
• To detect, investigate, and prevent fraud, cheating, money laundering, and other prohibited conduct;
• To provide customer support via live chat and email, in Tagalog and English;
• To manage and enforce responsible gaming obligations, including processing self-exclusion requests and monitoring for problem gambling indicators;
• To administer bonuses, promotions, and loyalty rewards;
• To send transactional communications (account notifications, transaction confirmations, security alerts);
• To send marketing communications where you have consented to receive them;
• To improve Platform performance, user experience, and game selection based on anonymised usage analytics;
• To comply with PAGCOR reporting requirements and any lawful order of a competent Philippine authority.

7 Sharing and Disclosure of Personal Data

60ph does not sell, rent, trade, or otherwise transfer your personal data to third parties for commercial purposes. Personal data is shared only in the circumstances described below:

7.1 Service Providers and Data Processors

60ph engages third-party service providers who process personal data on 60ph's behalf as Personal Information Processors under written agreements that require them to maintain confidentiality and implement appropriate technical and organisational security measures. These include: payment processors (GCash/GXI, PayMaya/Voyager Innovations, local bank partners); KYC and identity verification providers; game content providers (Pragmatic Play, JILI, PG Soft, Evolution Gaming, and others); cloud hosting and IT infrastructure providers; fraud detection and cybersecurity services; and customer support platform operators.

7.2 Regulatory and Law Enforcement Disclosure

60ph is legally required to disclose personal data to PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), the Bureau of Internal Revenue (BIR), and other competent Philippine government authorities upon lawful request or as required by applicable law. 60ph will disclose only the minimum data necessary to fulfil such obligations.

7.3 Business Transfers

In the event of a merger, acquisition, restructuring, or sale of all or part of 60ph's business, personal data may be transferred to the acquiring entity as part of that transaction, subject to the acquiring entity providing equivalent data protection commitments and to the extent permitted by applicable law.

8 Cookies and Tracking Technologies

60ph uses cookies and similar tracking technologies (including local storage and session storage) to operate and improve the Platform. The categories of cookies 60ph uses are:

• Strictly Necessary Cookies: Essential to Platform functionality — login session management, security tokens, payment flow continuity. These cannot be disabled without breaking the Platform.
• Performance and Analytics Cookies: Collect aggregated, anonymised data on how players interact with the Platform to identify performance issues and improve user experience. No individual player is identified in this data.
• Functional Cookies: Remember your language preferences, game settings, and responsible gaming configuration to provide a personalised experience across sessions.
• Marketing Cookies: Used only where you have provided explicit consent, to track engagement with 60ph promotions and measure the effectiveness of marketing campaigns within the Platform.

You can manage cookie preferences through your browser settings. Note that disabling strictly necessary cookies will impair your ability to use the Platform. Most mobile browsers on Android and iOS provide cookie management settings accessible through the browser's privacy or settings menu.

9 Data Security

60ph implements technical, organisational, and physical security measures designed to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure, or access. Key security measures include:

• 256-bit SSL/TLS encryption for all data in transit between your device and 60ph's servers;
• Encryption at rest for sensitive stored data including identity documents and financial information;
• Role-based access controls ensuring staff access only the personal data necessary for their specific job function;
• Multi-factor authentication requirements for all internal administrative access to player data systems;
• Regular third-party penetration testing and security audits;
• Comprehensive audit logging of all access to personal data systems;
• Staff data protection training conducted regularly.

In the event of a personal data breach that is likely to result in risk to your rights and freedoms, 60ph will notify the National Privacy Commission within 72 hours of becoming aware of the breach, and will notify affected players without undue delay as required by NPC Circular No. 16-03 and applicable DPA implementing rules.

10 Data Retention

60ph retains personal data for no longer than is necessary to fulfil the purposes described in this Policy, subject to the following retention schedules:

• Active Account Data: Retained for the duration of the player's account relationship with 60ph;
• Post-Closure Account Data: Following voluntary or involuntary Account closure, identity, financial, and gaming data is retained for a minimum of five (5) years as required by PAGCOR's record-keeping requirements and the Anti-Money Laundering Act;
• Transaction Records: Retained for a minimum of five (5) years from the date of each transaction, in accordance with AMLC record-keeping obligations;
• Customer Support Communications: Retained for three (3) years from the date of each interaction for dispute resolution and service quality purposes;
• Marketing Data: Retained until you withdraw consent or request deletion, whichever is earlier, subject to any overriding legal retention obligations;
• Security Logs: Retained for twelve (12) months from the date of generation, unless required longer for an active security investigation.

Following the expiry of the applicable retention period, personal data is securely deleted or anonymised such that it can no longer be attributed to an identified or identifiable individual.

11 Your Rights as a Data Subject

As a data subject under the Data Privacy Act of 2012, you have the following rights in respect of your personal data held by 60ph. All rights requests should be submitted to 60ph's Data Protection Officer using the contact details in Section 15.

12 Children and Minors

The 60ph Platform is strictly prohibited for use by any person under the age of 21 years. 60ph does not knowingly collect personal data from individuals under 21. The Platform employs age verification mechanisms during registration and prior to significant withdrawals to enforce this requirement in compliance with PAGCOR regulations.

13 Cross-Border Data Transfers

60ph is a Philippines-based platform and stores player data primarily within Philippine-based or regionally proximate data centres. Where it is operationally necessary to transfer personal data to service providers operating outside the Philippines — such as internationally headquartered game providers or cloud infrastructure providers with Asia-Pacific regional nodes — 60ph ensures that such transfers are made only to jurisdictions that provide an adequate level of data protection comparable to the DPA, or where appropriate contractual safeguards (data processing agreements with standard contractual clauses) have been put in place with the receiving party.

60ph does not transfer player financial data or government-issued identity document data outside the Philippines except where expressly required for payment processing or mandated by Philippine law.

14 Amendments to This Policy

60ph reserves the right to amend this Privacy Policy at any time. Where changes are material — meaning they affect how your personal data is used or your rights as a data subject — 60ph will provide notice through the Platform, by registered email, and/or through a login notification at least seven (7) calendar days before the revised Policy takes effect.

The date at the top of this Policy indicates when it was last updated. Your continued use of the 60ph Platform after any amendment takes effect constitutes your acceptance of the revised Policy. If you do not agree with any amendment, you should cease using the Platform and contact 60ph's DPO to request Account closure and data handling in accordance with your rights under Section 11.

15 Contact and Data Protection Officer

For all data privacy matters — including exercising your rights under Section 11, raising a concern about how 60ph handles your personal data, or requesting a copy of this Policy in an alternative format — please contact 60ph's Data Protection Officer:

• Live Chat: Available 24/7 through your 60ph Account dashboard — select "Data Privacy" from the support topic menu for direct routing to the DPO team
• Email: [email protected] — mark your subject line "Data Privacy Request – [Your Username]"
• Response Time: 60ph will acknowledge your request within three (3) business days and provide a substantive response within fifteen (15) business days, as required by NPC guidelines